Read-only is enforced
PostgreSQL statements run in a READ ONLY transaction that is always rolled back, one statement per call. MongoDB only runs commands from a read-only list; $out and $merge are refused.
PMonitor
Careful by default
A tool that can see production should be hard to misuse. These are the rules it enforces itself.
Write mode expires
Write mode is per connection, never turns on by itself and turns itself off after 15 minutes.
No passwords in the config
Use a passwordFile with 0600 permissions (anything looser is refused) or type the password; typed passwords stay in memory.
Local only
The console listens on loopback and the printed URL carries a token.
Nothing new on the server
No agent, no extra port: databases stay bound to the server's loopback and are reached through ssh.
Everything is logged
Writes and connection changes go to actions.log.
Want a console like this for your servers?
Get in touch and tell us which databases you look after.
Get in touch